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(57) Abstract 



Systems and methods for verifying the authorization of a server (60) to provide network resources to a client (10). At selected times, 
the client (10) asserts an authorization interrupt, which will disable some or all non-essential functions of the client (10) unless the servers 
(60) authorization is verified within an allotted period of time. The client creates a client message (94) by generating a random number 
(92) and combining it with a client identifier (93) and a value that specifies the current time. The client message is encrypted (96) and sent 
to the server (60). Only authorized servers (60) can decrypt the client message and create an encrypted service message that includes the 
random number. The service message can also contain an authorization code specifying the services that the client may receive, and an 
expiration count (86) indicating when the authorization procedure will be repeated. The client (10) receives and decrypts (124) the service 
message. If the random number in the service message is found to be the same (130) as the random number in the client message, the 
server (60) is authorized, and the client (10) is enabled (91) to exhibit a selected level of functionality. The client (10) can be associated 
with a smart card or another intelligent peripheral that verifies the authorization of the server in behalf of the client. 
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VERIFICATION OF SERVER AUTHORIZATION TO 
PROVIDE NETWORK RESOURCES 
BACKGROUND OF THE INVENTION 

1. The Field of the Invention 

5 The present invention relates to systems and methods for verifying the 

authorization of a server to provide network resources to a client. More specifically, 
the present invention relates to systems and methods whereby the client compares a 
random number encrypted in a message sent to the server with a random number 
encrypted in a message sent to the client from the server, wherein the client 
10 determines that the server is authorized if the random numbers are the same. 

2. The Prior State of the Art 

During recent years, the use of computer networks to distribute information to 
users has increased dramatically. For example, the Internet is currently used for many 
purposes, including electronic commerce, delivery of news, entertainment, and 

15 education, to name just a few. Many Internet service providers ("ISPs") and content 
providers have found that accurate identification of users is necessary to support 
subscription services. When a client establishes communication with an ISP, the 
server at the ISP typically verifies that the client is recognized as one that has duly 
subscribed to the Internet service. Likewise, many World Wide Web ("Web") sites 

20 are available to users by subscription only. When a client attempts to access a 
subscription-based Web site, the client may be prompted to verify that it is authorized 
to receive content from the site. 

Verification of the identity of clients has been accomplished in many ways. A 
simple example involves the client transmitting to the server a user name and a 

25 password that has been previously registered with the server. If the user name and 
password match a registered user name and password stored at the server, the client is 
allowed access to the network resources. More advanced security systems include, 
for example, transmitting a client machine identifier from the client to the server or 
other techniques whereby information associated with the client verifies the identity 

30 of the client. 

Verifying the identity and authorization status of clients . allows ISPs and 
content providers to collect subscription fees from users. Without a reliable system to 
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verify authorization of clients, non-authorized users could access service, and 
legitimate users may have little incentive to pay for service. 

There are some network configurations and business models that require 
security measures beyond the typical client-identification strategies described above. 
5 In some instances, it is desirable to identify the authorization of the server to provide 
network resources to the client. For a variety of reasons, suppliers or manufacturers 
of certain client systems may desire to allow only selected servers to provide network 
resources to their client systems. In one example, a provider of enhanced Internet, 
television, or other information or entertainment services may develop a client system 

10 specifically designed to receive its information or entertainment resources. In this 
example, the supplier of the client system can be seen primarily as the provider of the 
information or entertainment services, while the client system can be seen as a tool 
allowing users to gain access to the provider. 

The traditional security strategy of providing user names, passwords, or other 

15 identifiers is inadequate when applied to the verification of authorization of a server 
to provide network resources. As can be easily understood, simple identifiers are not 
readily applicable to configurations where a single or a small number of servers 
provide service to a large number of clients. In particular, if a server were to widely 
distribute an identifier to multiple clients, an imposter server could easily intercept the 

20 identifier and attempt to adopt the identity of the authorized server. 

In addition, the entity that desires to control access by unauthorized servers is 
often not the client, but is instead the operator of the authorized server. When an 
unauthorized server attempts to gain access to client systems, the operator of the 
authorized server may not be aware of the attempt. Accordingly, if conventional 

25 security systems were the only available means of protection, the client system and 
the operator of the unauthorized server could collude to override the security system. 
As a result, any security system that is freely accessible by the operators of client 
systems or unauthorized servers could be breached relatively easily. 

In view of the foregoing, what is needed is a system for verifying the identity 

30 or authorization of servers to provide network resources to client systems. It would 
be an advancement in the art to provide a system for verifying the authorization of 
servers that is not merely analogous to the conventional use of identifiers to verify the 
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identity of clients. It would be particularly advantageous to verify the authorization of 
servers using a security system that cannot be readily accessed or overridden by an 
operator of the client system. It would also be desirable to combine such a system for 
verifying the authorization of servers with a system for verifying the identity of 
5 clients. 

SUMMARY OF THE INVENTION 

The present invention relates to systems and methods for verifying the 
authorization of a server to provide network resources to a client. The authorization 
process requires the server to decrypt a message generated by the client and to 

10 respond with an appropriate encrypted message. Authorized servers have the 
decryption key needed to decrypt the message, whereas unauthorized servers will be 
unable to decrypt the message or to return the appropriate encrypted message to the 
client. The system can be configured to prevent software operating on the client from 
enabling the functions of the client without proper server authorization or may 

15 otherwise override the security features. In addition, the process of verifying the 
authorization of the server can be combined with measures to verify the identity of the 
client. 

According to one implementation of the invention, when a security counter, or 
timer, exceeds the value of an expiration count stored at the client or at other selected 

20 times, an authorization interrupt is generated. The other selected times for generating 
authorization interrupts may occur, for example, when the client is turned on or when 
software operating at the client generates a reauthorization signal. The authorization 
interrupt eventually disables some or all of the functions of the client unless the server 
is authorized within an allotted period of time. In response to the authorization 

25 interrupt, the client generates a client message that includes the value of the security 
counter, a client identifier, and a random number. The client message is enciypted 
using an encryption key and is transmitted to the server. 

If the client message is received by an unauthorized server, the server is 
unable to decrypt the message and to access the encoded information included therein. 

30 When the client message is instead received by an authorized server, the server uses a 
decryption key to decrypt the message. The server then decombines the value of the 
security counter, the client identifier, and the random number. Based on the value of 



WO 00/56008 



PCT/US00/06874 



the security counter, the server selects a new expiration count that will cause the client 
to again initiate the authorization process at a future time. The client identifier is 
compared against a client authorization database to determine the level of service that 
the client is authorized to receive. The level of service represents a level of 
5 functionality that the client is permitted to exhibit. The server generates an 
authorization code corresponding to the authorized level of service. 

The server then creates a service message by combining the new expiration 
count, the authorization code, and the random number that was included in the client 
message. The server encrypts the service message and transmits it to the client. If the 

10 client message had been received by an unauthorized server, the message would have 
remained encrypted, such that the unauthorized server would not have gained access 
to the random number. Thus, any service message created by an unauthorized server 
will not include the original random number. 

The client receives, decrypts, and decombines the service message. The 

15 random number included in the service message is compared with the random number 
included in the client message. If the random numbers are the same, the client 
assumes that the server is authorized to provide network resources. The new 
expiration count is written to an expiration count register and the new authorization 
code is written to an authorization register at the client. The client can then receive 

20 service from the server until the security count exceeds the new expiration count. If, 
however, the random numbers are not the same, the client assumes that the server is 
unauthorized, and the functions of the client are disabled according to the 
authorization interrupt after the allotted time has expired. 

The client can include features that effectively prevent software executed on 

25 the client or the operator of the client from interfering with the server verification and 
authorization procedures of the invention. For example, the encryption key can be 
encoded on an integrated circuit at the client to prevent the key from becoming 
publicly known. Furthermore, the integrated circuit can have multiple encryption 
keys encoded thereon, with one of the keys being selected at random in each 

30 authorization procedure. 

Certain registers at the client, such as those that specify the level of 
authorization of the client, can be controlled by the server without the intervention of 
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software at the client. In particular, the server sends encrypted information to the 
client, where it can be decrypted by a decryption key encoded in an application- 
specific integrated circuit and then written to control registers. Thus, once the server 
verifies the identity of the client, the appropriate level of authorization can be 
5 maintained, even if the security of client software is breached. The authorized server, 
at its discretion, can also make any of a wide range of requests to the client to ensure 
that the client is authorized to receive network resources. For example, the client 
machine identifier can be independently verified by the server. 

BRIEF DESCRIPTION OF THE DRAWINGS 
10 In order that the manner in which the above-recited and other advantages of 

the invention are obtained, a more particular description of the invention briefly 
described above will be rendered by reference to specific embodiments thereof which 
are illustrated in the appended drawings. Understanding that these drawings depict 
only typical embodiments of the invention and are not therefore to be considered 
15 limiting of its scope, the invention will be described and explained with additional 
specificity and detail through the use of the accompanying drawings in which: 

Figure 1 is a schematic diagram illustrating a network environment in which 
the invention may be implemented. 

Figure 2 is a schematic diagram illustrating one embodiment of a client system 
20 for use with the invention. 

Figure 3 is a schematic diagram depicting a client and a server interacting to 
verify the authorization of the server to provide network resources to the client. 

Figure 4 is schematic diagram illustrating the client of Figure 3 in greater 
detail, including features for generating an encrypted client message and for 
25 comparing a random number contained in a service message with a random number 
contained in the client message. 

Figure 5 is a schematic diagram illustrating the server of Figure 3 in greater 
detail, including features for decrypting the client message and generating an 
encrypted service message. 
30 Figure 6 is a schematic diagram showing the manner in which an application- 

specific integrated circuit at the client can decrypt authorization information received 
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from the server using an encoded decryption key according to one embodiment of the 
invention. 

Figure 7 is a schematic diagram illustrating an alternative embodiment in 
which a smart card is used in conjunction with the client to verify that the server is 
5 authorized to provide network resources. 

Figure 8 is a flow diagram depicting a method for generating an encrypted 
client message that includes a random number. 

Figure 9 is a flow diagram illustrating a method for decrypting the client 
message at the authorized server and generating an encrypted service message that 
10 incorporates the random number. 

Figure 10 is a flow diagram illustrating a method for decrypting the service 
message and comparing the random number included in the service message with the 
random number included in the client message. 

DETATT.ED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
15 The present invention relates to systems and methods for verifying the 

authorization of a server to provide network resources to a client. Repeatedly, and at 
specified times, the client initiates communication with the server and transmits a first 
encrypted message to the server. An authorized server has access to a decryption key 
that is used to decrypt the first encrypted message. If, however, the server is 
20 unauthorized, the message cannot be decrypted. When the first encrypted message 
has been successfully decrypted, the authorized server generates a second encrypted 
message and transmits it to the client. Based on the contents of the second encrypted 
message, the client can determine whether the server is authorized to provide the 
network resources. 

25 The invention is described below by using diagrams to illustrate either the 

structure or processing of embodiments used to implement the system and method of 
the present invention. Using the diagrams in this manner to present the invention 
should not be construed as limiting of its scope. The embodiments of the present 
invention may comprise a special purpose or general purpose computer including 

30 various computer hardware, as discussed in greater detail below. The embodiments 
may further comprise multiple computers linked in a network environment. 
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Embodiments within the scope of the present invention include computer 
readable media having computer-executable instructions or data structures stored 
thereon. Such computer readable media can be any available media which can be 
accessed by a general purpose or special purpose computer. By way of example, and 
5 not limitation, such computer readable media can comprise RAM, ROM, EEPROM, 
CD-ROM or other optical disk storage, magnetic disk storage or other magnetic 
storage devices, or any other medium which can be used to store the desired 
computer-executable instructions or data structures and which can accessed by a 
general purpose or special purpose computer. Combinations of the above should also 

10 be included within the scope of computer readable media. Computer-executable 
instructions comprise, for example, instructions and data which cause a general 
purpose computer, special purpose computer, or special purpose processing device to 
perform a certain function or group of functions. The computer-executable 
instructions and associated data structures represent an example of program code 

15 means for executing the steps of the invention disclosed herein. 

Figures 1 and 2 and the following discussion are intended to provide a brief, 
general description of a suitable network and computing environment in which the 
invention may be implemented. Although not required, the invention will be 
described in the general context of computer-executable instructions, such as program 

20 modules, being executed by a personal computer. Generally, program modules 
include routines, programs, objects, components, data structures, etc. that perform 
particular tasks or implement particular abstract data types. 

For illustration purposes, the invention is described herein in reference to the 
Internet, which represents one example of the network environments that are 

25 compatible with the invention. However, the principles disclosed herein are also 
applicable to substantially any other network environment in which a server provides 
network resources to a client. For example, a smart card or another PCMCIA device 
can be used as an intermediary device that communicates with the server and, in turn, 
with the client. 

30 Figure 1 illustrates one embodiment of the architecture of an network 

environment in which the invention may be implemented. In this embodiment, 
multiple client systems 10 communicate with a modem pool 12 by means of direct- 
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dial, bi-directional data connections 14, which may be conventional telephone lines, 
ISDN connections, connections supported by cable television providers, or any other 
suitable communications channel. Modem pool 12 may be any conventional modem 
pool, such as those that are currently used for providing access to the Internet and 
5 other wide area networks. For example, modem pool 14 may be provided by a local 
ISP. Thus, modem pool 14 may be coupled to a number of server computers, such as 
remote servers 16, via a conventional network infrastructure, which may be Internet 
infrastructure 18. 

The systems and methods of verifying the authorization of a server can be 

10 practiced in network environments that combine information retrieval over the 
Internet with television viewing. As seen in Figure 1, at least some of client systems 
10 can be associated with display devices 20 that serve a dual function. First, display 
devices 20 display graphical, computer-generated or computer-transmitted 
information provided by client systems 10. World Wide Web ("Web") pages 

15 retrieved from remote servers 16 represent one example of the graphical information 
that may be displayed on display devices 20. Second, television programming 
transmitted from television programming source 22 may also be displayed on display 
devices 20. Television programming source 22 may be any desired television 
broadcaster or delivery system. Accordingly, display device 20 may be a 

20 conventional television or may instead be a computer monitor adapted to display 
television programming. Indeed, the client system is optionally integrated in a 
television, or instead may be a self-contained unit. It is anticipated that, as high 
definition television ("HDTV") becomes common, embodiments of client terminal 26 
will support HDTV. As used herein, "client terminal" 26 is defined to include a client 

25 system 10 and a display device 20. 

Optionally, the system of Figure 1 can include a dedicated server 26 that is 
dedicated to providing Internet access to some or all of client systems 10. In this 
example, dedicated server 26 differs from modem pool 12 in that the dedicated server 
is specifically designed to service a particular type of client system 10 in contrast to 

30 serving any personal computer or other computing device that can access the Internet. 
Furthermore, dedicated server 26 optionally provides additional information services, 



WO 00/56008 



PCT/US00/06874 



such as television listings, enhanced television services, video and graphics delivery, 

etc. 

Figure 2 depicts selected elements of one embodiment of a client system that 
may be used to implements portions of the invention. Client system 10 uses hardware 
5 and computer-executable instructions for providing the user with a graphical user 
interface, by which the user can access Internet resources, send and receive e-mail, 
and optionally receive other information services. Operation of client system 10 is 
controlled by a central processing unit (CPU) 28, which is coupled to an application- 
specific integrated circuit (ASIC) 30. CPU 28 executes computer-executable 

10 instructions designed to implement features of client system 10, including some of the 
steps of methods of the present invention. ASIC 30 contains circuitry which is used 
to implement certain functions of client system 10. For example, ASIC 30 may be 
coupled to an audio digital-to-analog converter 32 and to a video encoder 34, which 
provide audio and video output, respectively, to display device 20 of Figure 1. 

15 Client system 10 may further include an IR interface 36 for detecting infrared 

signals transmitted by a remote control input device, such as a hand-held device or a 
wireless keyboard. In response to the infrared signals, IR interface 36 provides 
corresponding electrical signals to ASIC 30. A standard telephone modem 38 and an 
ISDN modem 40 are coupled to ASIC 30 to provide connections to modem pool 12 

20 and, via the Internet 18, to remote servers 16. While the client system illustrated in 
Figure 2 includes both a telephone modem and an ISDN modem, either one of these 
devices is sufficient to support the communications of the client system. Furthermore, 
in other embodiments, modems 38 and 40 may be supplemented or replaced with 
cable modem 42 or another suitable communications device. In other environments, 

25 communication may instead be established using a token ring or Ethernet connection. 

Also coupled to ASIC 30 are a mask read-only memory (ROM) 44, a flash 
memory 46, and a random access memory (RAM) 48. Mask ROM 44 is non- 
programmable and provides storage of computer-executable instructions and data 
structures. Flash memory 46 may be a conventional flash memory device that can be 

30 programmed and erased electronically. Flash memory 46 may store Internet browser 
software as well as data structures. In one embodiment, a mass storage device 50 
coupled to ASIC 30 is included in client system 10. Mass storage device 50 may be 
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10 

used to supply computer-executable instructions and data structures to other 
components of the client system or to receive data downloaded over the network. 
Mass storage device 50 may include any suitable medium for storing computer- 
executable instructions, such as magnetic disks, optical disks, and the like. 
5 Application software and associated operating system software are stored in 

flash memory 46, or instead may be stored in any other suitable memory device, such 
as mask ROM 44 or mass storage device 50. The computer-executable instructions 
that, according to one embodiment of the invention, are used to monitor television 
viewing habits of a user and to construct a user profile that forms at least part of the 

10 basis for selecting advertisements are executed by CPU 28. In particular, CPU 28 
executes sequences of instructions contained in one or more of mask ROM 44, flash 
memory 46, and RAM 48 to perform certain steps of the present invention that will be 
more specifically disclosed hereinafter. 

In one embodiment of the invention, client system 10 is a WebTV set-top box 

15 manufactured by WebTV Networks, Inc. of Mountain View, California. In this case, 
dedicated server 26 of Figure 1 can be a WebTV server that provides Internet access 
and, optionally, additional content and information. Alternatively, however, client 
system 10 may be any of a variety of systems for receiving resources from a server. 

Those skilled in the art will appreciate that the invention is not limited to the 

20 distributed computing environment and the client system illustrated in Figures 1 and 
2. The invention may be practiced using other client system configurations, including 
personal computers, hand-held devices, multi-processor systems, microprocessor- 
based or programmable consumer electronics, network PCs, minicomputers, 
mainframe computers, and the like. In distributed computing environments, program 

25 modules may be located in both local and remote memory storage devices. Moreover, 
the authorization of servers to provide network resources can be verified in local area 
networks and wide area networks in addition to the network depicted in Figure 1. For 
example, a smart card, a PCMCIA device, or another intelligent peripheral can be 
used with the client to verify that the server is authorized to provide network 

30 resources according to an alternative embodiment. 

Figure 3 illustrates selected functional features of one embodiment of a system 
that includes a client system and a server system. Client system 10 communicates 
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11 

with a network infrastructure 52 via a conventional network interface 54, which may 
be any of the modems or other communications devices described above in reference 
to Figure 2. Network infrastructure 52 may be the network architecture illustrated in 
Figure 1. Client system 10 includes a system enabler module 56 that controls the 
5 availability of some or all of the non-essential features of client system 10. "Non- 
essential features", as used herein, can include all of the features of client system 10 
other than the basic functions that permit the client system to verify the identity of 
server 60. For example, when all of the non-essential features of client system 10 are 
disabled, the client system may still be capable of being turned on and accessing 

10 server 60 sufficiently to determine whether the server is authorized to provide 
network resources, while being unable to retrieve and display information resources. 

When client system 10 is periodically instructed to verify the authorization of 
server 60, client message generation module 58 creates an encrypted client message 
that is sent to the server via network infrastructure 52. In one embodiment, the 

15 encrypted client message includes a random number selected by client system 10. A 
detailed description of the components of the client message and the methods for 
creating the client message and generating random numbers is provided below in 
reference to Figure 4. 

Server system 60 of Figure 3 is authorized to provide network resources to 

20 client system 10. Thus, server system 60 is capable of decrypting the client message 
using client message decryption module 62. Based on the information included in the 
client message, a client authorization module 64 determines the level of functionality 
that client system 10 is authorized to exhibit and determines the next time that the 
client system is to repeat the authorization process. The random number encoded in 

25 the client message and information specifying the client's authorized level of 
functionality and the next time that the client is to initiate reauthorization process are 
included in an encrypted service message created by service message generation 
module 66. It is noted that had server system 60 been not authorized to provide 
network resources to client system 10, it would have been incapable of decrypting the 

30 client message. Any random number included in the client message would have 
remained inaccessible by the unauthorized client, and any service message could not 
have included the random number. 
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Client system 10 receives the encrypted service message and decrypts it using 
service message decryption module 68. A message comparator module 70 compares 
the contents of the service message with the contents of the client message. In 
particular, in embodiments employing random numbers, message comparator module 
5 70 determines whether the service message contains the same random number as the 
client message. If so, client system 10 assumes that server system 60 is authorized to 
provide network resources, and system enabler module 56 permits the authorized 
network resources to be received and displayed or otherwise communicated to a user 
of the client system. If, however, message comparator module 70 determines that the 

10 service message does not contain the same random number as the client message, 
client system 10 assumes that server system 60 is not authorized, and system enabler 
module 56 disables some or all of the non-essential functions of the client system. 

Figures 4 and 5 illustrate in greater detail the elements and functions of the 
client systems and authorized server systems according to one embodiment of the 

15 invention. Figure 4 depicts client system 10, which is illustrated as having three 
functional subsystems: system enablement subsystem 72, client message generation 
subsystem 74, and message comparison subsystem 76. Likewise, Figure 5 depicts 
server system 60 as having three functional subsystems: client message decryption 
subsystem 78, client authorization subsystem 80, and service message generation 

20 subsystems 82. The foregoing subsystems are presented to conveniently describe the 
structure and functions of client system 10 and server system 60 in the following 
discussion. In particular, the subsystems of client system 10 and server system 60 
will be addressed below in the order that they are used in a typical process of 
verifying the authorization of the server system according to the invention. 

25 Turning to Figure 4, client system 10 includes a security counter 84 and an 

expiration count 86 that together determine the moments at which the server 
verification procedures of the invention are initiated. Expiration count 86 has been set 
to specify when the server verification procedure is to begin. Security counter 84 is a 
timer or clock that repeatedly increments the value of a security count until the 

30 security count reaches or exceeds the value of expiration count 86. Count comparator 
88 monitors security counter 84 and, when the security count reaches or exceeds 
expiration count 86, the count comparator asserts an authorization interrupt. Security 
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counter 84 and count comparator 88 constitute one example of a timing mechanism 
for specifying the times at which the client is to assert an authorization interrupt. In 
response to the authorization interrupt, a grace period timer 90 counts down an 
allotted grace period. If client system 10 fails to verify the authorization of server 
5 system 60 to provide network resources before the expiration of the allotted grace 
period, system enabler 91 will disable some or all of the non-essential functions of the 
client system. 

The authorization interrupt asserted by count comparator 88 initiates activity 
in client message generation subsystem 74. In other circumstances, authorization 

10 interrupts can be created upon turning on client system 10 or at other times specified 
by software operating on the client system. To begin the process of verifying the 
authorization of server system 60, random number generator 92 generates a random 
number. In a preferred embodiment, random number generator 92 generates a unique 
signature based on asynchronous or external input conditions. For example, random 

15 number generator 92 can be a linear feedback shift register ("LFSR") seeded by 
asynchronous input according to techniques that will be understood by those skilled in 
the art. While numbers generated by an LFSR or by other conventional devices are 
technically pseudorandom, for purposes of this disclosure they will be designated as 
random. Random numbers generated by LFSRs or by other comparable systems 

20 provide the advantage of essentially eliminating the opportunity for other computers 
to generate random numbers in lockstep with client system 10. 

Client system 10 further includes a client identifier 93, which can be a unique 
number associated with the client system. Client message generator 94 combines 
client identifier 93, the random number, and the current value of the security count, 

25 which indicates the current time. The value of the security count is a time identifier 
which permits the server system, as further described below, to specify the times at 
which the client system is to repeat the procedure for verifying the authorization of 
the server system. The value of the security count gives the server system a reliable 
understanding of the current time as measured by the client system. 

30 The resulting client message is encrypted by client message encryptor 96 

using an encryption key 98. In one embodiment, encryption key 98 is encoded in an 
integrated circuit, such as ASIC 30 of Figure 2. Encoding encryption key 98 in 
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hardware as opposed to software greatly increases the difficulty of identifying the 
encryption key by those who might want to compromise the security of the system. In 
another embodiment, multiple encryption keys 98 can be encoded on the integrated 
circuit, further increasing the difficulty of learning the encryption key and 
5 determining which of the multiple keys is used in any specific instance. When 
multiple encryption keys are available, the particular key that is to be used can be 
selected in a random process. In addition, when there are multiple encryption keys 
98, the encryption key that is used to encrypt a particular client message can be 
included in the client message for a purpose that is discussed below in reference to 
10 Figure 5. 

The encrypted client message is sent from client system 10 to server system 60 
via network interface 54. Client message decryptor receives the client message 
through network interface 55 and decrypts it using the appropriate decryption key 
102. When client system 10 includes only one encryption key 98, the selection of the 
15 decryption key 102 is relatively straightforward, since there will be only one 
decryption key. 

However, when client system 10 includes multiple encryption keys 98, 
decryption may involve successively applying the corresponding decryption keys 102 
to the client message in a trial and error process until one decryption key is found to 

20 successfully decrypt the message. Because the client message includes a random 
number, the security count, and the client identifier, a successful decryption can be 
determined when the decrypted client identifier matches one of the client identifiers 
registered at server system 60. It is noted that in some embodiments it may not be 
possible to reliably determine whether a message has been successfully decrypted by 

25 examining only the decrypted random number, and to a lesser degree, the security 
count, since the server system does not know what random number and security count 
to look for. 

In some embodiments, there can be a very small risk that the client message 
decryptor 100 will apply one of the decryption keys 102 that does not correspond to 
30 the encryption key 98 used by client system 10, but will still determine that the 
decrypted client identifier matches one of the registered client identifiers. In other 
words, there can be a small possibility of a false positive decryption, in which the 
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wrong decryption key will process the encrypted client identifier such that, by chance, 
it matches one of the registered client identifiers. If this were to occur, the random 
number would not be properly decrypted. Including the encryption key in the 
encrypted client message can eliminate this risk, however slight it might be. In 
5 particular, client message decryptor 100 can successively apply the multiple 
decryption keys 102 to the client message until the decrypted client message reveals 
an encryption key that corresponds to the decryption key just applied to the client 
message and a client identifier that matches a registered client identifier. Nonetheless, 
for most purposes, the invention can be practiced with negligible risk of a false 

10 positive decryption result without including the encryption key in the client message. 
Indeed, in many cases, the efficiency losses incurred by increasing the size of the 
client message could outweigh any benefits that might be realized by eliminating the 
risk of a false positive decryption result. 

Once the client message has been successfully decrypted, the message is 

15 decombined, or separated into its constituent parts, by client message decombiner 104 
using the inverse mathematical operation that has been used to combine these values 
at client system 10. Client identifier 93, security count 106, and random number 108 
are thereby extracted from the client message. In embodiments that establish the 
authorization level by which client system 10 is to receive service in addition to 

20 verifying the authorization of server system 60 to provide service, client identifier 93 
is compared against client authorization database 110, which contains records of the 
authorization levels of the registered clients. The appropriate authorization code 112 
for client system 10 is derived from client authorization database 110. 

Server system 60 can perform any additional security checks to verify the 

25 identity of client system 10. For example, server system 60 can request that client 
system 10 securely transmit its client identifier 93 to compare it against the client 
identifier included in the client message. Those skilled in the art will recognize that 
other information can be transmitted from client system 10 to server system 60 in 
order to verify the validity of the client message. 

30 Based on the value of security count 106, which specifies the time that the 

current authorization interrupt has been asserted, as measured by the client system, an 
expiration count selector 114 selects a new expiration count 116. New expiration 
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count 116 can be selected based on the particular user profile associated with client 
system 10 as defined in client authorization database 100, or can instead be selected to 
cause the reauthorization procedure to be repeated after a standard period of time. 

A service message generator 118 then mathematically combines random 
5 number 108, authorization code 112, and new expiration count 116 to generate a 
service message. Since authorized server system 60 has successfully decrypted the 
client message, the service message generated thereby includes the same random 
number as the client message. The service message is encrypted by service message 
encryptor 120 using an encryption key 122. The resulting encrypted service message 

10 is transmitted to client system 10 via network interface 55. 

Reference is now made to Figure 4, which illustrates elements of message 
comparison subsystem 76 according to this embodiment of the invention. The service 
message is received by a service message decryptor 124, which decrypts the message 
using a decryption key 126. A service message decombiner separates the service 

15 message into its constituent parts, which include the authorization code, the new 
expiration count, and the random number. The random number included in the 
service message is passed to random number comparator 130, where it compared with 
the random number included in the client message. If it is determined that the random 
numbers are the same, client system 10 assumes that server system 60 has decrypted 

20 the message and is therefore authorized to provide network resources to the client. If, 
however, client system 10 receives no service message or does not receive the original 
random number in the service message, the client system assumes that the server 
system is unauthorized. 

If the server system is found to be authorized, client system enables or 

25 activates its functions based on the value of the authorization code. An appropriate 
authorization code written to a control register in an application-specific integrated 
circuit, such as ASIC 30 of Fig. 2, permits the functions of the client system to 
operate. The authorization code can further indicate one of any number of levels of 
service or functionality. For example, when the invention is practiced in a WebTV 

30 set-top box or another client system that provides information and entertainment 
services to a user, the authorization code may activate the particular services that the 
user has subscribed to. Likewise, the new expiration count is written to a control 
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register at the client system so as to again initiate the server verification procedure 
described herein when the security count exceeds the new expiration count. 

If the server system has been determined to be unauthorized, grace period 
timer 90 of Figure 4 will eventually indicate that the allotted grace period has expired. 
5 At this point, the non-essential or any other set of functions of client system 10 are 
disabled until such time that an authorized server system is identified. 

Figure 6 illustrates an embodiment of the invention wherein the authorization 
code and the new expiration count are written to control registers at an ASIC in a 
secure manner that essentially eliminates the opportunity of operators of the client 

10 system to override or otherwise tamper with the security features described herein. 
As has been described in reference to Figure 2, ASIC 30 is connected to a display 
device 20 and one or more memory devices 132. ASIC 30 can receive service 
messages and other information from the server system by means of network 
infrastructure 52 and network interface 54, 

15 One of the functions of CPU 28 is writing control parameters to control 

registers 134 of ASIC 30. Among the control parameters are the authorization code 
and the new expiration count. According to this embodiment, CPU 28 transmits the 
authorization code and the new expiration count to ASIC 30 in the encrypted form in 
which they were received from the server system. A private decryption key 126 is 

20 encoded on ASIC 30 and permits a decryptor 124 encoded on ASIC to perform 
decryption of the authorization code and the new expiration count. It is noted that 
decryption key 126 and decryptor 124 of Figure 6 can be the same as the 
corresponding elements illustrated in Figure 5. Once the client system determines 
that the server system authorized, the new expiration count and the authorization 

25 code, having been decrypted, are written to secure registers 134b. In this manner, 
authorized server system 60 can securely write the new expiration count, the 
authorization code, and any other security parameters to secure control registers 134b 
without software operating on the client system having access to decryption key 126. 
Control parameters that do not pertain to the security features of the invention can be 

30 written to non-secure control registers 132a included in ASIC 30. 

As illustrated in Figure 6, the security system of the invention can allow 
operating system software or other software operating on the client system to see only 
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a limited amount of information. For example, as discussed herein, the authorization 
code and the expiration count can be written to secure control registers 134b. In 
addition, the authorization interrupt signal generated by count comparator 88 of Fig. 4 
can be written to a control register 132 in one embodiment. Otherwise, the operation 
5 of the security system of this embodiment of the invention is not visible to the 
operating system, but is instead conducted by transmitting encrypted messages 
between the client system and the server system and decrypting the service message 
using a decryption key 126 encoded in hardware at the client system. Accordingly, 
rogue software or operators of the client system are unable to interfere with the 

10 operation of the security features of the invention. 

Figure 7 illustrates an alternative embodiment, wherein the communication 
between the client and server is facilitated by an intelligent peripheral. As used 
herein, "intelligent peripheral" refers to any object or device associated with the client 
system, whether embodied in hardware, software, or a combination of thereof, that is 

15 capable of verifying the authorization of a server to provide resources to the client. 
Examples of intelligent peripherals include smart cards or PCMCIA devices. 

Intelligent peripheral 136 of Figure 7 communicates with server system 60 and 
verifies the authorization of the server system to provide network resources to client 
system 10 in much the same way that the client system performed these functions in 

20 the embodiment disclosed above in reference to Figures 3-6. In effect, intelligent 
peripheral 136 is an intermediary device that performs the function of verifying the 
authorization status of server system 60 on behalf of client system 10. Thus, 
intelligent peripheral 136 can include the functional components to perform the 
verification that are otherwise described herein as being included in client system 10. 

25 After intelligent peripheral 136 determines that server system 60 is authorized 

(or not authorized) to provide resources to client system 10, the client system 
communicates with the intelligent peripheral. The communication between client 
system 10 and intelligent peripheral 136 informs the client system whether server 
system 60 is authorized, and further can include verification of the credentials of the 

30 intelligent peripheral, itself. Thus, intelligent peripheral 136 can have the functional 
components to communicate with client system 10, to verify its own authorization, 
and to verify the authorization of server system 60 that are otherwise described herein 
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as being included in the server system. System enabler module 56 responds to 
confirmation that server system 60 is authorized by enabling selected functions of 
client system 10 in a similar manner as described herein in reference to Figures 3-6. 

The use of intelligent peripheral 136 can be useful when server system 60 is 
5 not immediately accessible, or when client system 10 and server system 60 are not 
simultaneously available to communicate directly one with another. Intelligent 
peripheral 136 can be constructed to prevent encryption keys or other sensitive 
information contained therein from being accessible to persons who might attempt to 
disassemble the intelligent peripheral and decode the sensitive information. Those 
10 skilled in the art, upon learning of the disclosure made herein, will understand how 
intelligent peripheral 136 can be constructed to prevent unauthorized access of 
information. 

It is noted that intelligent peripheral 136 can be described as being a 
component of client system 10. Thus, unless otherwise indicated, any description or 
15 claim directed to a client system that verifies the authorization of a server system to 
provide resources encompasses the embodiment wherein an intelligent peripheral 
included in the client system performs some or all of the communication with the 
server system. 

Figures 8-10 summarize the steps of one embodiment of the methods for 
20 verifying that a server system is authorized to provide network resources to a client 
system. Figure 8 illustrates a method for composing a client message in response to 
an authorization interrupt. Figure 9 shows a method whereby an authorized server 
system receives the client message and composes a corresponding service message. 
Figure 10 illustrates a method for comparing the contents of the service message with 
25 the contents of the client message. 

In step 140 of Figure 8, the security counter at the client system increments a 
security count until it reaches or exceeds the value of the expiration count. In step 
142, the client system asserts an authorization interrupt, which will disable some or all 
non-essential functions of the client system after expiration of a grace period, unless 
30 the authorization of the server system is first verified. A random number is then 
generated in step 144 according to the techniques described herein. The client system 
combines the random number, the security count, and the client identifier to form a 
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client message in step 146. In step 148, the client message is encrypted as described 
herein. As shown at step 150, the encrypted message is then transmitted to the server 
system. 

Referring to Figure 9, the server system receives the client message in step 
5 152. The server system then decrypts the client message in step 154 and decombines 
the client message in step 156 as disclosed herein. Using the client identifier, the 
server system selects an authorization code to be associated with the client system as 
shown at step 158. The server system also selects a new expiration count in step 160, 
thereby indicating when the next reauthorization procedure should, be initiated. In 

10 step 162, the server system combines the random number, the authorization code, and 
the new expiration count to form a service message. The service message is then 
encrypted in step 164 and transmitted to the client system in step 166. 

As illustrated in Figure 10, the client system receives the service message 
according to step 168. The client system then decrypts the service message in step 

15 170 and decombines the service message in step 172. As shown at step 174, the client 
system compares the random number contained in the service message with the 
original random number contained in the client message. According to decision block 
176, if the random numbers are the same, the authorization of the server system to 
provide network resources to the client system has been verified, and the method 

20 advances to step 178, in which the authorization code causes selected functions of the 
client system to be enabled, whereby selected resources from the server can be 
received by the client. Next, in step 180, the new expiration count is set, and will 
cause the method of Figures 8-10 to repeat when the security count again exceeds the 
expiration count. 

25 If the server system had been unauthorized, any service message generated 

thereby would not have included the random number. In this case, decision block 176 
would be answered in the negative, and the method would advance to step 182. In 
step 182, some or all of the non-essential functions of the client system would be 
disabled when the grace period expires without verification of the authorization of the 

30 server system, thereby preventing the client from receiving selected resources from 
the server. 
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The present invention may be embodied in other specific forms without 
departing from its spirit or other essential characteristics. The described embodiments 
are to be considered in all respects only as illustrative and not restrictive. The scope 
of the invention is, therefore, indicated by the appended claims rather than by the 
5 foregoing description. All changes which come within the range of equivalency of 
the claims are to be embraced within their scope. 
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CLAIMS: 

1 . A method of verifying that a server is authorized to provide resources 
to a client, comprising the steps of: 

generating and encrypting a first message at the client, the first 
message including a random number; 
5 transmitting the first message to the server; 

receiving an encrypted second message from the server; 
decrypting the second message at the client; and 
determining, by the client, whether the random number has been 
included in the second message, wherein the inclusion of the random number 
10 in the second message indicates that the server is authorized to provide 

resources to the client. 

2. A method as defined in claim 1, further comprising the steps of: 
decrypting the first message at the server; and 

generating and encrypting the second message at the server, the second 
15 message including the random number. 

3. A method as defined in claim 2, wherein the step of determining 
whether the random number has been included comprises the step of determining that 
the random number has been included in the second message, the method further 
comprising the step of activating selected functions of the client. 

20 4. A method as defined in claim 2, wherein: 

the step of receiving the encrypted second message comprises the step 
of receiving the encrypted second message from an unauthorized server; and 

the step of determining whether the random number has been included 
comprises the step of determining that the random number has not been 
25 included in the second message. 

5. A method as defined in claim 4, further comprising the step of 
disabling selected functions of the client. 

6. A method as defined in claim 1, further comprising the step processing 
asynchronous input to the client to generate the random number. 

30 7. A method as defined in claim 1, wherein the step of generating and 

encrypting the first message comprises the step of selecting an encryption key from 
among a plurality of encryption keys encoded on an integrated circuit at the client. 
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8. A method as defined in claim 7, wherein the step of generating and 
encrypting the first message further comprises the step of including the selected 
encryption key in the first message. 

9. A method as defined in claim 1, further comprising the step of 
5 asserting an authorization interrupt signal at the client prior to the step of generating 

and encrypting the first message, wherein the authorization interrupt disables at least 
some functions of the client after the expiration of an allotted period of time unless 
the server is first verified as being authorized to provide resources to the client. 

10. A method as defined in claim 8, wherein the step of determining 
10 whether the random number is included comprises the step of determining that the 

random number is included in the second message, the method further comprising the 
step of identifying an expiration count encoded in the second message that specifies 
when a next authorization interrupt signal is to be asserted. 

11. A method as defined in claim 8, wherein the step of determining 
15 whether the random number is included comprises the step of determining that the 

random number is included in the second message, the method further comprising the 
step of identifying an authorization code that specifies a level of functionality to be 
exhibited by the client. 

12. A method as defined in claim 1, further comprising the steps of: 

20 generating and encrypting another message at the client, the other 

message including another random number; 

transmitting the other message to unauthorized server that does not 
possess a decryption key for decrypting the other message; and 

noting, at the client, that no message has been received from the 
25 unauthorized server within an allotted period of time, thereby indicating that 

the unauthorized server is not authorized to provide resources to the client. 

13. A method as defined in claim 1, wherein the client includes an 
intelligent peripheral, and wherein the step of generating and encrypting a first 
message at the client is conducted by the intelligent peripheral. 

30 14. A method as defined in claim 13, further comprising the step of 

communicating between the intelligent peripheral and a system enabler module of the 
client to indicate whether the server is authorized to provide resources to the client. 
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15. A method of verifying that a server is authorized to provide resources 
to a client, comprising: 

repeatedly conducting, at times specified by a timing mechanism at the 
client, the steps of: 

5 by the client, combining and encrypting a client identifier, a 

random number, and a time identifier to generate a first message; 
transmitting the first message from the client to the server; 
at the server, conducting the steps of: 
decrypting the first message; 
10 identifying an authorization code associated with the 

client identifier, the authorization code defining a level of 
functionality to be exhibited by the client; and 

combining and encrypting the authorization code and 
the random number to generate a second message; 
15 transmitting the second message to the client; 

decrypting the second message at the client; and 
verifying, by the client, that the random number has been 
included in the second message, thereby indicating that the server is 
authorized to provide resources to the client. 
20 16. A method as defined in claim 15, further comprising the step 

processing asynchronous input to the client to generate the random number. 

17. A method as defined in claim 16, wherein the step of processing 
asynchronous input comprises the step of using a linear feedback shift register to 
generate the random number. 
25 18. A method as defined in claim 15, wherein the step of identifying an 

authorization code comprises the step of comparing the client identifier against a 
client authorization database specifying levels of functionality that can be exhibited 
by various clients. 

19. A method as defined in claim 15, further comprising the step of 
30 selecting, at the server, an expiration count for the client, the expiration count 
indicating a time when the timing mechanism at the client is to again initiate an 
authorization process, wherein the expiration count is included in the second message. 



WO 00/56008 



PCT/US00/06874 



25 

20. A method as defined in claim 15, further comprising, after the step of 
verifying that the random number has been included in the second message, the step 
of activating selected functions of the client. 

21. A method as defined in claim 15, wherein the client includes an 
5 intelligent peripheral, and wherein the step of verifying that the random number has 

been included in the second message is conducted by the intelligent peripheral. 

22. A computer program product for implementing, at a client system, a 
method of verifying that a server is authorized to provide resources to the client 
system, the computer program product comprising: 

10 a computer-readable medium having computer-executable instructions 

for implementing the method, wherein the computer-executable instructions 
comprise: 

program code means for generating and encrypting a first 
message identifying the client system and including a random number; 
15 program code means for initiating transmission of the first 

message to the server; 

program code means for receiving an encrypted second 
message from the server; 

program code means for decrypting the second message; and 
20 program code means for determining whether the random 

number has been included in the second message, wherein inclusion of 
the random number in the second message indicates that the server is 
authorized to provide resources to the client system. 

23. A computer program product as defined in claim 22, wherein the 
25 computer-executable instructions further comprise program code means for detecting 

that the server has not transmitted a second message to the client system within an 
allotted period of time. 

24. A computer program product as defined in claim 22, wherein the 
computer-executable instructions further comprise program code means for selecting 

30 a decryption key from among a plurality of encryption keys encoded on an integrated 
circuit at the client system. 
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25. A computer program product as defined in claim 22, wherein the 
program code means for generating and encrypting a first message comprise program 
code means for processing asynchronous input to the client system to generate the 
random number. 



computer-executable instructions further comprise program code means for disabling 
selected functions of the client when the random number has not been included in the 
second message. 

27. A computer program product as defined in claim 22, wherein the 
10 computer-executable instructions further comprise program code means for activating 

selected functions of the client when the random number has been included in the 
second message. 

28. A computer program product for implementing, at a server, a method 
of verifying that the server is authorized to provide resources to a client, the computer 

1 5 program product comprising : 

a computer-readable medium having computer-executable instructions 



5 



26. A computer program product as defined in claim 22, wherein the 



for implementing the method, wherein the computer-executable instructions 



comprise: 



20 



program code means for receiving an encrypted first message 
from the client, the first message identifying the client and including a 
random number; 



program code means for decrypting the first message; 



25 



program code means for selecting an authorization code 
associated with the client, the authorization code defining a level of 
functionality to be exhibited by the client; 



program code means for generating and encrypting a second 
message including the random number and the authorization code; and 



30 



program code means for initiating transmission of the second 
message to the client, wherein the random number, having been 
included in the second message, is to indicate to the client that the 
server is authorized to provide resources to the client. 
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29. A computer program product as defined in claim 28, wherein the 
computer-executable instructions further comprise program code means for 
comparing a client identifier included in the first message against a client 
authorization database specifying levels of functionality that can be exhibited by 

5 various clients. 

30. A computer program product as defined in claim 28, wherein the 
computer-executable instructions further comprise program code means for selecting 
an expiration count for the client, the expiration count indicating a time when a timing 
mechanism at the client is to again initiate an authorization process, wherein the 

10 expiration count is included in the second message. 

31. A method for periodically authorizing a client to exhibit a selected 
level of functionality, the method comprising the steps of: 

establishing communication between the client and the server; and 
repeatedly conducting, at selected times while communication is 
15 established between the client and the server, the steps of: 

causing the client to determine whether the server is authorized 
to provide resources to the client; 

if the client determines that the server is authorized to provide 
resources, then activating selected functions of the client; and 
20 if the client determines that the server is not authorized to 

provide resources, then disabling selected functions of the client. 

32. A method as defined in claim 31, further comprising the step of 
repeatedly conducting, at the server, the step of determining a level of functionality to 
be exhibited by the client. 

25 33. A method as defined in claim 3 1, wherein the step of causing the client 

to determine whether the server is authorized to provide resources to the client 
comprises the step of determining, at the client, whether the server is capable of 
decrypting an encrypted message generated by the client. 

34. A method as defined in claim 31, further comprising, if the client 
30 determines that the server is authorized to provide resources, the steps of: 

decrypting an encrypted authorization code received by the client from 
the server, wherein the encrypted authorization code is decrypted using a 
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decryption key encoded in an integrated circuit at the client, the decryption 
key being inaccessible to any software being executed at the client; and 

writing the authorization code to a register at the integrated circuit, the 
authorization code specifying a level of functionality to be exhibited by the 
5 client. 

35. In a networked system including a client and a server interconnected 
one with another, wherein resources are provided from the server to the client based 
on an authorization level of the client, a method for verifying the authorization level, 
comprising the steps of: 

10 transmitting an encrypted message from the server to the client, the 

encrypted message including an authorization code defining the authorization 
level of the client; 

decrypting the encrypted message using decryption instructions 
encoded in hardware at the client, the decryption instructions being 
15 inaccessible to software executed on the client; and 

writing the authorization code to a register in the client after the step of 
decrypting the encrypted message. 

36. A method as defined in claim 35, further comprising the steps of: 
generating and encrypting a first message at the client, the first 

20 message identifying the client and including a random number; 

transmitting the first message from the client to the server prior to the 
step of transmitting the encrypted message from the server to the client; 

decrypting the first message at the server prior to the step of 
transmitting the encrypted message from the server to the client; and 
25 determining, after the step of decrypting the encrypted message, that 

the random number has been included in the encrypted message, thereby 
indicating that the server is authorized to provide the resources to the client. 

37. A method as defined in claim 35, wherein the step of transmitting an 
encrypted message from the server to the client is conducted in response to an 

30 encrypted first message being transmitted from the client to the server. 

38. A method as defined in claim 35, further comprising the steps of: 
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including an expiration count in the encrypted message, the expiration 
count indicating a time when a timing mechanism at the client is to again 
initiate an authorization process; and 

writing the expiration count to another register in the client after the 
5 step of decrypting the encrypted message. 

39. A method as defined in claim 35, wherein the hardware at the client is 
an integrated circuit. 
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